What’s Vulnerable › Products

Simple Download Monitor vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Simple Download Monitor version is affected

Latest Simple Download Monitor vulnerabilities

• CVE-2026-2383 — Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field (CVSS 6.4)
• CVE-2025-8977 — Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality (CVSS 6.5)
• CVE-2025-58197 — WordPress Simple Download Monitor Plugin <= 3.9.34 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2025-24663 — WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2021-24692 — Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal (CVSS 6.5)
• CVE-2021-24696 — Simple Download Monitor < 3.9.9 - Multiple CSRF (CVSS 8.8)
• CVE-2021-24694 — Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes (CVSS 5.4)
• CVE-2021-24698 — Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails Removal (CVSS 4.3)
• CVE-2021-24697 — Simple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2021-24695 — Simple Download Monitor < 3.9.6 - Unauthenticated Log Access (CVSS 7.5)
• CVE-2021-24693 — Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail (CVSS 9.0)
• CVE-2020-5651 — (CVSS 8.8)
• CVE-2020-5650 — (CVSS 6.1)